Latest Version 1.0.4
June 16, 2025
Welcome to the new Splunkbase! To return to the old Splunkbase, click here.
ITSI Episode Edit
Makes it possible to change status/severity/owner via spl, example:
Built by Trifork Security
Compatibility
Not Available
Platform Version: 9.4, 9.3, 9.2, 9.1, 9.0
Rating
0
(0)
Log in to rate this app
Support
Developer Supported addon
Makes it possible to change status/severity/owner via spl, example:
| makeresults | eval field="status", episodeId="0000-000-000-0000", value="5" | itsiedit fieldField=field episodeidField=episodeId valueField=value
This is a command wrapper around the ITSI API, and therefor you're able to use the same values as described here:
https://docs.splunk.com/Documentation/ITSI/latest/EA/EpisodeAPI
Categories
Created By
Trifork Security
Type
addon
Downloads
394
Licensing
Splunk Answers
Resources
Log in to report this app listing